doctator/bin-there-done-that
doctator/bin-there-done-that
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Page: Least Privilege Policy
Pages
📊 Genesis Radio Infrastructure Overview 🚀 Genesis Radio - Healthcheck Response Runbook Account Creation Policy Account Deletion Policy Backup Integrity Backup Policy Disaster Recovery Plan Encryption Standards GROWL — Genesis Radio Commit Style Guide Genesis Hosting Technologies Planned Database Expansion Genesis Radio Internal Architecture Map Home Infrastructure Overview Least Privilege Policy Maintenance Window Policy Provisioning and OnBoarding Terms of Service (TOS) User Roles
Clone
1
Least Privilege Policy
doctator edited this page 2025-05-02 23:15:58 +00:00
Table of Contents

Genesis Hosting enforces least privilege access for all systems.

Principles

  • Users are given the minimum level of access necessary to perform their work
  • Admin tools are isolated by function (e.g., billing vs. system access)
  • Escalation of privileges must be requested, documented, and time-bound

Tools in Use

  • WHMCS permissions are restricted by group
  • SSH access is limited using AllowUsers and firewalled IPs
  • TeamTalk server admins are rotated and audited monthly

Review Cycle

  • Access roles are reviewed quarterly
  • Logs of access changes are stored and rotated every 90 days